From 8960bdbfd8045a85c2c231633c343dada7b4e0a5 Mon Sep 17 00:00:00 2001
From: DanieleAurilio <danieleaurilio@gmail.com>
Date: Sun, 19 Jun 2022 15:14:54 +0200
Subject: [PATCH] #13317 Not load unintended files

---
 .../core/strapi/lib/core/app-configuration/config-loader.js   | 4 +++-
 .../strapi/lib/core/app-configuration/load-config-file.js     | 4 ----
 2 files changed, 3 insertions(+), 5 deletions(-)

diff --git a/packages/core/strapi/lib/core/app-configuration/config-loader.js b/packages/core/strapi/lib/core/app-configuration/config-loader.js
index eaa9780f04..3d03cd0fa7 100644
--- a/packages/core/strapi/lib/core/app-configuration/config-loader.js
+++ b/packages/core/strapi/lib/core/app-configuration/config-loader.js
@@ -4,12 +4,14 @@ const path = require('path');
 const fs = require('fs');
 const loadFile = require('./load-config-file');
 
+const VALID_EXTENSIONS = ['.js', '.json', '.ts'];
+
 module.exports = dir => {
   if (!fs.existsSync(dir)) return {};
 
   return fs
     .readdirSync(dir, { withFileTypes: true })
-    .filter(file => file.isFile())
+    .filter(file => file.isFile() && VALID_EXTENSIONS.includes(path.extname(file.name)))
     .reduce((acc, file) => {
       const key = path.basename(file.name, path.extname(file.name));
 
diff --git a/packages/core/strapi/lib/core/app-configuration/load-config-file.js b/packages/core/strapi/lib/core/app-configuration/load-config-file.js
index 4918c8f164..2a65a1b292 100644
--- a/packages/core/strapi/lib/core/app-configuration/load-config-file.js
+++ b/packages/core/strapi/lib/core/app-configuration/load-config-file.js
@@ -30,10 +30,6 @@ const loadJSONFile = file => {
 const loadFile = file => {
   const ext = path.extname(file);
 
-  if(ext !== '.js' && ext !== '.json' && ext !== '.ts') {
-    throw new Error(`Remove an invalid config file: ${file}`);
-  }
-
   switch (ext) {
     case '.js':
       return loadJsFile(file);